Rajko M. a écrit :
To prevent applications from opening illicit outgoing connections, run it with apparmor, which is capable of preventing an application from doing just about anything that you haven't previously allowed.
If apparmor would ask questions and provide web pages with relevant help content, like ZA, it will be possible to setup profiles even to non-expert users, but it doesn't. So, situation is that one one side there is comprehensive solution that is not used, and partial that is used.
what an application can do should be done by the programmer, not the user. The user should be made aware of that when calling the app for install. I don't see why Amarok should need absolutely network? it should only need it if it have to play files on an other computer or scan external database what is not necessary. I don't see any case where one could have to be asked at run time... The Zonealarm feature is done to prevent apps maliciously installed to make connections, but preventing these apps to install is better jdd -- http://www.dodin.net http://valerie.dodin.org http://news.opensuse.org/2009/04/13/people-of-opensuse-jean-daniel-dodin/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org